Mypower
S4100
Troubleshooting
Maipu Confidential & Proprietary Information
Page
78
of
124
Possible Reasons
Judging Methods and Solutions
Some function module that
conflict with DYNAMIC ARP
INSPECTION is enabled.
After some function module that conflict with DYNAMIC ARP
INSPECTION is enabled, DYNAMIC ARP INSPECTION cannot be
enabled. DYNAMIC ARP INSPECTION can be enabled only after
the other conflicting module is disabled. You can confirm the
conflicting module via the prompt information. For example,
the security function of the port cannot be enabled with
DYNAMIC ARP INSPECTION on one port at the same time.
Fault 2: DYNAMIC ARP INSPECTION does not take effect.
Possible Reasons
Judging Methods and Solutions
ip source binding is
configured, but DYNAMIC
ARP INSPECTION is not
enabled on the port.
Check the configuration, whether DYNAMIC ARP INSPECTION
is enabled on the port (DYNAMIC ARP INSPECTION is enabled
on the port via the ip arp inspection command).
DYNAMIC ARP INSPECTION
is enabled on the port, but
the expected IP SOURCE
GUARD binding items are
not configured.
Check whether the expected IP SOURCE GUARD binding items
are configured. For example, DYNAMIC ARP INSPECTION is
enabled on the port, but no any IP SOURCE GUARD binding
item, the port drops call received arp packets.
The number of the entries
exceeds the maximum value
and some binding entries are
invalid. As a result, some arp
packets that are expected to
pass are dropped.
Use the show ip binding table command to view whether
there are invalid binding items. Delete the un-used binding
items to release the resources and satisfy the application.
Fault 3: The port cannot be shutdown by the err-disable function.
Possible Reasons
Judging Methods and Solutions
The packets received by the
port do not exceed the
threshold in successive 20s.
After enabling DYNAMIC ARP INSPECTION, the arp packet rate
of the port is limited as 15pps by default (the value can be
modified in the port configuration mode via the ip arp
inspection rate-limit command). The port can be shutdown
by err-disable only when the received arp packets exceed the
limitation in successive 20s. Confirm that the arp packets
received by the port exceed the limitation in more than
successive 20s. If necessary, set the rate limitation of the arp
packets as one smaller value.
Fault 4: The port cannot become up after being shutdown by err-disable
because the received arp packets exceeds the limitation.
Possible Reasons
Judging Methods and Solutions
